XSQL: Java 2 PropertyPermission Problem

We need to fine-tune Java 2 SDK security on our app servers (Tomcat, SunONE) and I'm using the PolicyTool and -Djava.security.debug=access,failure to track what the various XSQL jars are acessing.
We'd normally not allow read,write access to System properties but one of the classes seems to require this:
access: access allowed (java.io.FilePermission C:\java\jakarta-tomcat-4.1.18\common\classes\oracle\xml\xsql\XSQLConnectionManagerFactory.class read)
access: access allowed (java.io.FilePermission C:\java\jakarta-tomcat-4.1.18\shared\classes\oracle\xml\xsql\XSQLConnectionManagerFactory.class read)
access: access denied (java.util.PropertyPermission * read,write)
java.lang.Exception: Stack trace
     void java.lang.Thread.dumpStack()
          Thread.java:997
     void java.security.AccessControlContext.checkPermission(java.security.Permission)
          AccessControlContext.java:261
     void java.security.AccessController.checkPermission(java.security.Permission)
          AccessController.java:399
     void java.lang.SecurityManager.checkPermission(java.security.Permission)
          SecurityManager.java:545
     void java.lang.SecurityManager.checkPropertiesAccess()
          SecurityManager.java:1246
     java.util.Properties java.lang.System.getProperties()
          System.java:488
     void oracle.xml.xsql.XSQLConfigManager.reloadConfigFile(oracle.xml.xsql.XSQLPageRequest)
          XSQLConfigManager.java:465
     void oracle.xml.xsql.XSQLConfigManager.insureConfigurationIsLoaded(oracle.xml.xsql.XSQLPageRequest)
          XSQLConfigManager.java:191
etc
Is there anyway around this? Why does XSQLConfigManager.reloadConfigFile need read,write access?
Many Thanks
Paul

It requires write permission on System properties to be able to set the HTTP proxy server if you have indicated a proxy server in the XSQLConfig.xml file.

Similar Messages

Java.util.PropertyPermission problem

Hello All.
I get the following exception from code in my bean (accessed by a JSP page).
java.security.AccessControlException: access denied (java.util.PropertyPermission com.test.util.ClassOne.PropertiesFilename write)
The line of code responsible:
System.setProperty(com.test.util.ClassOne.PropertiesFilename, "myfile.txt");
I have set the following permission for the app in the server.policy file:
permission java.util.PropertyPermission "*", "read,write";
And it still doesnt work.
Any deas?
Thanks
Sawan

You are probably not setting the permission for the correct code base.
I think you have two options.
(1) Grant the property permission to all code with a statement like
grant {
permission java.util.PropertyPermission "*", "read,write";
};in the server.policy file
(2) Find the specific policy file for your java bean which is not the same as server.policy. Easiest way is to search directories where your EJB is deployed for files that match something like "*olicy*". When you find that file, add the same permission entry as above to it. Even though you grant globally it will only affect your specific bean (at least, that is how it works for the J2EE server).
Good luck.

Re: java.security.AccessControlException: access denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)

This looks like it might be a bug in 6.1SP5,
 weblogic/kernel/Kernel.java at line 85.
 It's trying to do the right thing to ignore an exception if in
 an applet but it's ignoring the wrong exception
 (SecurityException, when it looks like the stack
 trace is throwing a java.security.AccessControlException).
 If you need a fix, this would need to go through support
 and be filed as a problem with WLS Core.
 "Ram Gopal" <[email protected]> wrote in message
 news:[email protected]...
 >
 > We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We have
 an applet
 > that subscribes to a JMS Topic.
 > The applet is throwing the following exception with SP5:
 >
 > java.lang.ExceptionInInitializerError:
 java.security.AccessControlException: access
 > denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling
 read)
 >
 > at java.security.AccessControlContext.checkPermission(Unknown Source)
 >
 > at java.security.AccessController.checkPermission(Unknown Source)
 >
 > at java.lang.SecurityManager.checkPermission(Unknown Source)
 >
 > at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
 >
 > at java.lang.System.getProperty(Unknown Source)
 >
 > at weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79)
 >
 > at weblogic.kernel.Kernel.<clinit>(Kernel.java:54)
 >
 > at
 weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactory
 Delegate.java:166)
 >
 > at java.lang.Class.newInstance0(Native Method)
 >
 > at java.lang.Class.newInstance(Unknown Source)
 >
 > at
 weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFact
 ory.java:147)
 >
 > at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
 >
 > at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
 >
 > at javax.naming.InitialContext.init(Unknown Source)
 >
 > at javax.naming.InitialContext.<init>(Unknown Source)
 >
 > at
 com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.
 java:266)
 >
 > at
 com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstr
 actApplet.java:81)
 >
 > at
 com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:1
 87)
 >
 > at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
 >
 > at sun.applet.AppletPanel.run(Unknown Source)
 >
 > at java.lang.Thread.run(Unknown Source)
 >
 >
 > Any ideas as to what I am missing?
 >
 > Thanks,
 > Ram


I suggest going through customer support, I don't know what
 the resolution was. You might also try the security newsgroup,
 as no JMS code has been called by the application yet at
 the point the exception is thrown.
 Tom
 lee wrote:
 > All:
 > We are upgrading weblogic 6.0 to weblogic 6.1 and encounted exactly the same error. Just wondering if you guys were able to fix the issue with bea.
 >
 > Your response is highly appreciated.
 >
 > Thanks!
 >
 > Li

"How to Resolve ORA-29532 Java 2 Permission Problems in RDBMS 8.1.6 and 8.1.7"

I'm in the process of publishing the following note (134280.1), titled "How to Resolve ORA-29532 Java 2
Permission Problems in RDBMS 8.1.6 and 8.1.7".
It will be accessible from Oracle Support's "Metalink" site.
"How to Resolve ORA-29532 Java 2 Permission Problems in RDBMS 8.1.6 and 8.1.7".
Problem Description
Periodically an application running in the Enterprise Java Engine
(EJE) formerly known as the "Oracle 8i JVM", "the JSERVER component", or
the "Aurora JVM" will fail with a "java 2" permissions error having the
following format :
Note : Message shown below have been reformatted for easier readability.
java.sql.SQLException: ORA-29532: Java call terminated by uncaught Java exception:
usually followed by a detailed error message similar to one of the following
messages :
Example # 1
java.security.AccessControlException: the Permission
(java.net.SocketPermission hostname resolve)
has not been granted by dbms_java.grant_permission to
SchemaProtectionDomain(SCOTT|PolicyTableProxy(SCOTT))
Example # 2
java.security.AccessControlException: the Permission
(java.util.PropertyPermission * read,write)
has not been granted by dbms_java.grant_permission to
SchemaProtectionDomain(SCOTT|PolicyTableProxy(SCOTT))
Example # 3
java.security.AccessControlException: the Permission
(java.io.FilePermission \matt1.gif read)
has not been granted by dbms_java.grant_permission to
SchemaProtectionDomain(SCOTT|PolicyTableProxy(SCOTT))
Explanation
The java 2 permission stated in line # 2 of each of the above "Examples"
has not been granted to the user specified in line 4 of the above "Examples".
Solution Description
The methodology to solve this issue is identical for all java 2 permissions
cases.
1) Format a call "dbms_java.grant_permission" procedure as described below.
2) Logon as SYS or SYSTEM
3) Issue the TWO commands shown below
4) Logoff as SYS or SYSTEM
5) Retry your application
For Example # 1
1) Logon as SYS or SYSTEM
2) Issue the following commands :
a) call dbms_java.grant_permission('SCOTT',
'java.net.SocketPermission',
'hostname',
'resolve');
b) commit;
Note: Commit is mandatory !!
3) Logoff as SYS or SYSTEM
4) Retry your application
For Example # 2
1) Logon as SYS or SYSTEM
2) Issue the following commands :
a) call dbms_java.grant_permission('SCOTT',
'java.util.PropertyPermission',
'read,write');
b) commit;
Note: Commit is mandatory !!
3) Logoff as SYS or SYSTEM
4) Retry your application
For Example # 3
1) Logon as SYS or SYSTEM
2) Issue the following commands :
a) call dbms_java.grant_permission('SCOTT',
'java.io.FilePermission',
'\matt1.gif',
'read');
b) commit;
Note: Commit is mandatory !!
3) Logoff as SYS or SYSTEM
4) Retry your application
References
For more details on java 2 permissions and security within the EJE, review
Chapter 5, in the Java Developer's Guide. entitled,
"Security For Oracle8i Java Applications"
The RDBMS 8.1.7 version can be found at :
http://otn.oracle.com/docs/products/oracle8i/doc_library/817_doc/java.817/index.htm

Hi, Don,
I solved the problem of security exception I mentioned at java procedure topic as following:
ORA-29532: Java call terminated by uncaught Java exception: java.lang.SecurityException
I tried to use your solution as following:
call dbms_java.grant_permission('SDE', 'java.net.SocketPermission', 'ORCL.COHPA.UCF.EDU','resolve');
but SQL*plus gave me a error message:
invalid collumn.
What's the problem?
However, I call a grant command as following:
SQL> grant JAVASYSPRIV to sde;
and then that exception is gone. What's the difference between dbms_java.grant_permission and grant command?
Thanks
Bing
<BLOCKQUOTE>quote:<HR>Originally posted by don -- oracle support:
I'm in the process of publishing the following note (134280.1), titled "How to Resolve ORA-29532 Java 2
Permission Problems in RDBMS 8.1.6 and 8.1.7".
It will be accessible from Oracle Support's "Metalink" site.
"How to Resolve ORA-29532 Java 2 Permission Problems in RDBMS 8.1.6 and 8.1.7".
Problem Description
<HR></BLOCKQUOTE>
null

Can't pass params in xsql java program

I tried xsql java program in the xml dev guide.
It seems that the program failed to recognize the params.
Here is my code:
     Hashtable params = new Hashtable (3);
     params.put("docid", "801");
     params.put("orderby", "citeid");
     params.put("xml-stylsheet", "none");
     req.process(params, new PrintWriter(System.out), new PrintWriter(System.err));
I used the command line to run the xsql page with 2 params above, and it works fine.
Does anyone know how to solve this problem?
thanks,

Ignore this post. Seems one package was in an 8.1.5 calling the xmldom packages in an 8.1.6 database. Problem fixed by moving calling package to the same database.

Access denied ("java.util.PropertyPermission" "user.timezone" "write") [WINDOWS 7 64bit]

Hello,
we got on several computers the error message
access denied (java.util.PropertyPermission" "user.timezone" "write")
when we try to open an internal website. Until today everything worked fine.
An update on Java for windows 7 64, Version 7 Update 45 didnt solve the problem.
I tried to set the Java security permissions in the control panel to middle but it also didnt work after this change.
We also got this problem on another computer when we try to open an external site which also use Java.
Did anyone have an idea how to fix this problem?

Hi Guys.
I solved the problem adding a rule in the following file
$JAVA_HOME\lib\security\java.policy
grant {
permission java.util.PropertyPermission "user.timezone", "write";
After I killed the java process and restarted. The problem dissapeared

Permission check failed: java.util.PropertyPermission

Hello guys,
I am working on JME8 for Raspberry Pi and I am facing a problem with java.util.PropertyPermission.
I have added permission java.util.PropertyPermission "*:*" "read,write"; in appdb/_policy.txt but it does not seem to solve the problem.
Here is a log capture when I run it.
[19:20:55.144] INFO - VM - [SECURITY] iso=1:Blacklist Client: initialized
[19:20:55.144] INFO - VM - [SECURITY] iso=1:Authentication Provider: com.oracle.meep.security.DefaultAuthenticationProvider
[19:20:55.144] INFO - VM - [SECURITY] iso=1:Policy: com.oracle.meep.security.DefaultSecurityPolicy
[19:20:55.145] INFO - VM - [SECURITY] iso=1:Using policy file: /home/pi/jme8ea2/bin/../appdb/_policy.txt
[19:20:55.281] INFO - VM - [SECURITY] iso=1:Application assigned to the client "untrusted"
[19:20:56.056] FATAL - VM - [SECURITY] iso=3:Permission check failed: java.util.PropertyPermission "fileconn.dir.private" "read"
Any ideas is much appreciated.
Thanks in advance.
CheeSeng

Hello Petr,
Initially I added java.util.PropertyPermission into "ProjectProperties->Application Descriptor->API Permissions" in NetBeans 8.0 but did not specify "Protected Resource Name" and "Actions Requested".
After seeing the JAD containing this, MIDlet-Permission-Opt-1: java.util.PropertyPermission "" "",
I added fileconn.dir.private into "Protected Resource Name" and read into "Actions Requested" and it works!!
Thank you very much for your hints that made me look into the JAD.
Regards,
CheeSeng

Sir i am using datasocket read ,i am communicating with java but my problem is that bcz im using while loop to see if value has changed my labview consumes all the processors time ,sir i want a event like thing so that while loop is not in continuous loop

sir i have given lot of effort but i am not able to solve my problem either with notifiers or with occurence fn,probably i do not know how to use these synchronisation tools.

sir i am using datasocket read ,i am communicating with java but my problem is that bcz im using while loop to see if value has changed my labview consumes all the processors time ,sir i want a event like thing so that while loop is not in continuous loopHi Sam,
I want to pass along a couple of tips that will get you more and better response on this list.
1) There is an un-written rule that says more "stars" is better than just one star. Giving a one star rating will probably eliminate that responder from individuals that are willing to anser your question.
2) If someone gives you an answer that meets your needs, reply to that answer and say that it worked.
3) If someone suggests that you look at an example, DO IT! LV comes with a wonderful set of examples that demonstate almost all of the core functionality of LV. Familiarity with all of the LV examples will get you through about 80% of the Certified LabVIEW Developer exam.
4) If you have a question first search the examples for something tha
t may help you. If you can not find an example that is exactly what you want, find one that is close and post a question along the lines of "I want to do something similar to example X, how can I modify it to do Y".
5) Some of the greatest LabVIEW minds offer there services and advice for free on this exchange. If you treat them good, they can get you through almost every challenge that can be encountered in LV.
6) If English is not your native language, post your question in the language you favor. There is probably someone around that can help. "We're big, we're bad, we're international!"
Trying to help,
Welcome to the forum!
Ben
Ben Rayner
I am currently active on.. MainStream Preppers
Rayner's Ridge is under construction

Re Java Stored Procedure Problem

Ben
There appear to be some problem with the forum. It doesn't want to show my response to your post with the subject "Java Stored Procedure Problem". See the answer to this thread for an example of how to do this...
Is there a SAX parser with PL/SQL??

Ben
There appear to be some problem with the forum. It doesn't want to show my response to your post with the subject "Java Stored Procedure Problem". See the answer to this thread for an example of how to do this...
Is there a SAX parser with PL/SQL??

About Java Web Start Problems

Hi, everyone....
When I want to deploy BC4J Application using the Java Web Start , I occur one exception.
Java Web Start show exception for me :
java.lang.ExceptionInInitializerError
 at oracle.jbo.mom.DefinitionManager.<init>(DefinitionManager.java:122)
 at oracle.jbo.uicli.mom.JUMetaObjectManager.<init>(JUMetaObjectManager.java:52)
 at oracle.jbo.uicli.mom.JUMetaObjectManager.getJUMom(JUMetaObjectManager.java:131)
 at oracle.jbo.uicli.mom.JUMetaObjectManager.createApplicationObject(JUMetaObjectManager.java:363)
 at mypackage1.FormDepartmentsView1EmployeesView3.main(FormDepartmentsView1EmployeesView3.java:376)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
 at java.lang.reflect.Method.invoke(Unknown Source)
 at com.sun.javaws.Launcher.executeApplication(Unknown Source)
 at com.sun.javaws.Launcher.executeMainClass(Unknown Source)
 at com.sun.javaws.Launcher.continueLaunch(Unknown Source)
 at com.sun.javaws.Launcher.handleApplicationDesc(Unknown Source)
 at com.sun.javaws.Launcher.handleLaunchFile(Unknown Source)
 at com.sun.javaws.Launcher.run(Unknown Source)
 at java.lang.Thread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission oracle.xdkjava.compatibility.version read)
 at java.security.AccessControlContext.checkPermission(Unknown Source)
 at java.security.AccessController.checkPermission(Unknown Source)
 at java.lang.SecurityManager.checkPermission(Unknown Source)
 at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
 at java.lang.System.getProperty(Unknown Source)
 at oracle.xml.parser.v2.XMLParser.<clinit>(XMLParser.java:753)
 ... 16 more
Can anyone Know what is wrong ?

Wei,
did you sign the jar files you deploy ? Please follow the instruction sin teh online help and have a look at the batch file that need to be run to create the JClient ear file. This file contains signing information that might not be true for your system.
Frank

Java.lang.ExceptionInInitializerError: java.security.AccessControlException: access denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)

We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We have an applet
that
subscribes to a JMS Topic. The applet is throwing the following exception with
SP5:
java.lang.ExceptionInInitializerError: java.security.AccessControlException: access
denied
(java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
at java.lang.System.getProperty(Unknown Source)
at weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79)
at weblogic.kernel.Kernel.<clinit>(Kernel.java:54)
at weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactoryDelegate.java:166)
at java.lang.Class.newInstance0(Native Method)
at java.lang.Class.newInstance(Unknown Source)
at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:147)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
at javax.naming.InitialContext.init(Unknown Source)
at javax.naming.InitialContext.<init>(Unknown Source)
at com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.java:266)
at com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstractApplet.java:81)
at com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:187)
at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Any ideas as to what I am missing?
Thanks,
Ram

Prasad,
It's one thing not to have to modify the security policy on the server,
but on a client and applets have even bigger restrictions this might
very well be the only way since the default applet restrictions would
not allow a lot of permissions granted by default for normal Java
applications.
Dejan
Prasad Peddada wrote:
Deyan D. Bektchiev wrote:
Ram,
You are missing a permission grant in your policy file and the
SecurityManager doesn't allow the code to read that property.
You have either configured a different security manager or have the
wrong file in use.
For applets this file might be in the user's home directory and named
.java.policy
you need to have the following line somethere in it:
grant {
permission java.util.PropertyPermission "*", "read,write";
Which will allow any applet to read and write any JVM property.
Look at Java permissions is you need more info:
http://java.sun.com/j2se/1.3/docs/guide/security/permissions.html
--dejan
Ram Gopal wrote:
We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We
have an applet
that
subscribes to a JMS Topic. The applet is throwing the following
exception with
SP5:
java.lang.ExceptionInInitializerError:
java.security.AccessControlException: access
denied
(java.util.PropertyPermission weblogic.kernel.allowQueueThrottling
read) at java.security.AccessControlContext.checkPermission(Unknown
Source) at java.security.AccessController.checkPermission(Unknown
Source) at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source) at
java.lang.System.getProperty(Unknown Source) at
weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79) at
weblogic.kernel.Kernel.<clinit>(Kernel.java:54) at
weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactoryDelegate.java:166)
at java.lang.Class.newInstance0(Native Method) at
java.lang.Class.newInstance(Unknown Source) at
weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:147)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source) at
javax.naming.InitialContext.init(Unknown Source) at
javax.naming.InitialContext.<init>(Unknown Source) at
com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.java:266)
at
com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstractApplet.java:81)
at
com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:187)
at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
at sun.applet.AppletPanel.run(Unknown Source) at
java.lang.Thread.run(Unknown Source)
Any ideas as to what I am missing?
Thanks,
Ram
This is a WLS bug. You shouldn't have to modify security policy.
Please approach support for a fix.
Cheers,
-- Prasad

Java.security.AccessControlException: access denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)

 We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We have an applet
 that subscribes to a JMS Topic.
 The applet is throwing the following exception with SP5:
 java.lang.ExceptionInInitializerError: java.security.AccessControlException: access
 denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)
 at java.security.AccessControlContext.checkPermission(Unknown Source)
 at java.security.AccessController.checkPermission(Unknown Source)
 at java.lang.SecurityManager.checkPermission(Unknown Source)
 at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
 at java.lang.System.getProperty(Unknown Source)
 at weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79)
 at weblogic.kernel.Kernel.<clinit>(Kernel.java:54)
 at weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactoryDelegate.java:166)
 at java.lang.Class.newInstance0(Native Method)
 at java.lang.Class.newInstance(Unknown Source)
 at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:147)
 at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
 at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
 at javax.naming.InitialContext.init(Unknown Source)
 at javax.naming.InitialContext.<init>(Unknown Source)
 at com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.java:266)
 at com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstractApplet.java:81)
 at com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:187)
 at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
 at sun.applet.AppletPanel.run(Unknown Source)
 at java.lang.Thread.run(Unknown Source)
 Any ideas as to what I am missing?
 Thanks,
 Ram


I don't know what is happening. JMS hasn't been called yet -
 the applet is still setting up its initial context. You might want
 to try posting to the jndi (and perhaps rmi) newsgroup.
 Tom
 Ram Gopal wrote:
 > We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We have an applet
 > that subscribes to a JMS Topic.
 > The applet is throwing the following exception with SP5:
 >
 > java.lang.ExceptionInInitializerError: java.security.AccessControlException: access
 > denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)
 >
 > at java.security.AccessControlContext.checkPermission(Unknown Source)
 >
 > at java.security.AccessController.checkPermission(Unknown Source)
 >
 > at java.lang.SecurityManager.checkPermission(Unknown Source)
 >
 > at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
 >
 > at java.lang.System.getProperty(Unknown Source)
 >
 > at weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79)
 >
 > at weblogic.kernel.Kernel.<clinit>(Kernel.java:54)
 >
 > at weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactoryDelegate.java:166)
 >
 > at java.lang.Class.newInstance0(Native Method)
 >
 > at java.lang.Class.newInstance(Unknown Source)
 >
 > at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:147)
 >
 > at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
 >
 > at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
 >
 > at javax.naming.InitialContext.init(Unknown Source)
 >
 > at javax.naming.InitialContext.<init>(Unknown Source)
 >
 > at com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.java:266)
 >
 > at com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstractApplet.java:81)
 >
 > at com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:187)
 >
 > at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
 >
 > at sun.applet.AppletPanel.run(Unknown Source)
 >
 > at java.lang.Thread.run(Unknown Source)
 >
 >
 > Any ideas as to what I am missing?
 >
 > Thanks,
 > Ram

Java.util.PropertyPermission...not granted to ProtectionDomain(Stored Proc)

I'm trying to develop a java stored procedure on Oracle 10.1.2 that makes use of many other libraries, (Axis, WSIF, custom libs), and I'm stuck on this permissions error. I've loaded all of the libs into the same schema under the same user, (with JAVA_ADMIN), and several other privileges. I loaded the files using the following command, "loadjava -verbose -debug -recursivejars -genmissing -resolve -time -fileout loadJava.log -user {userID}/{pwd}@{SID} someJar.jar". The error occurs when a call to WSIFProperties.getProperty attempts to access the org.apache.wsif.mapper or org.apache.wsif.mappingconvention properties.
In a normal java2 environment, I'd simply edit the java.policy file to provide permissions to the codebase (file:/C:/spi4j2.5.4_J2ee1.4/coreLib/fsgWsif1.1.jar). Since Oracle doesn't have ProtectionDomains, if I add read permissions for those properties using the following command, "call dbms_java.grant_permission( 'SCHEMANAME', 'SYS:java.util.PropertyPermission', 'org.apache.wsif.mapper', 'read' )", it seems as if all of the other classes in the schema should be able to read the property, right? It appears the logfile dump below is showing the permissions that the classloader recognizes. Where did he get those? If they came from the DBA_JAVA_POLICY view, then why can't it pick up on the fact that I've granted read permission to the property it's trying to read? When I tried loading the classes without using the -recursivejars option, I got all kinds of ClassDefNotFound errors and couldn't even start the program, (I guess because it'd loaded the other jars as resources instead of unpacking the classes, the resolver couldn't look into the jars and locate the classes that it needed). The program works just fine outside of the database, (even without me adding read permissions for the codebase to access the properties in the java.policy file). Any help would be greatly appreciated. Thanks in advance.
Error shown below:
[2008-03-20 18:23:18.144] [DEBUG] [Root Thread] [org.apache.wsif.*][org.apache.wsif.logging.Trc] [traceIt] [Trc.java:1308] EVENT WSIFMapperFactory.newMapper Caught and handled throwable: java.security.AccessControlException: the Permission (java.util.PropertyPermission org.apache.wsif.mapper read) has not been granted to ProtectionDomain (file:/C:/spi4j2.5.4_J2ee1.4/coreLib/fsgWsif1.1.jar <no certificates>)
com.fds.classloader.ParentLastUrlClassLoader@e87f10c1
<no principals>
java.security.Permissions@c5dd7492 (
(java.io.FilePermission \C:\spi4j2.5.4_J2ee1.4\coreLib\fsgWsif1.1.jar read)
(java.net.SocketPermission localhost:1024- listen,resolve)
(java.util.PropertyPermission java.version read)
(java.util.PropertyPermission java.vm.name read)
(java.util.PropertyPermission java.vm.vendor read)
(java.util.PropertyPermission os.name read)
(java.util.PropertyPermission java.vendor.url read)
(java.util.PropertyPermission java.vm.specification.vendor read)
(java.util.PropertyPermission java.specification.vendor read)
(java.util.PropertyPermission os.version read)
(java.util.PropertyPermission java.specification.name read)
(java.util.PropertyPermission java.class.version read)
(java.util.PropertyPermission file.separator read)
(java.util.PropertyPermission java.vm.version read)
(java.util.PropertyPermission os.arch read)
(java.util.PropertyPermission java.vm.specification.name read)
(java.util.PropertyPermission java.vm.specification.version read)
(java.util.PropertyPermission java.specification.version read)
(java.util.PropertyPermission java.vendor read)
(java.util.PropertyPermission path.separator read)
(java.util.PropertyPermission line.separator read)
)

hi rzander,
I am in a situation similar to your :
{color:#ff0000}Caused by: java.security.AccessControlException: the Permission (java.io.FilePermission /home/neogeo/Java_Resources.jrxml read) has not been granted to ProtectionDomain (file:/home/neogeo/lib/jasperreports-3.0.0.jar <no signer certificates>)
AppClassLoader: file:/home/neogeo/lib/xml-apis.jar file:/home/neogeo/lib/jpa.jar file:/home/neogeo/lib/jdt-compiler-3.1.1.jar file:/home/neogeo/lib/png-encoder-1.5.jar file:/home/neogeo/lib/ant-1.5.1.jar file:/home/neogeo/lib/jaxen-1.1.1.jar file:/home/neogeo/lib/mondrian-2.3.2.8944.jar file:/home/neogeo/lib/commons-javaflow-20060411.jar file:/home/neogeo/lib/batik-bridge.jar file:/home/neogeo/lib/antlr-2.7.5.jar file:/home/neogeo/lib/batik-parser.jar file:/home/neogeo/lib/hibernate3.jar file:/home/neogeo/lib/batik-ext.jar file:/home/neogeo/lib/commons-logging-1.0.2.jar file:/home/neogeo/lib/jasperreports-3.0.0.jar file:/home/neogeo/lib/batik-svggen.jar file:/home/neogeo/lib/batik-xml.jar file:/home/neogeo/lib/xml-apis-ext.jar file:/home/neogeo/lib/batik-dom.jar file:/home/neogeo/lib/jakarta-bcel-20050813.jar file:/home/neogeo/lib/servlet.jar file:/home/neogeo/lib/hsqldb-1.7.1.jar file:/home/neogeo/lib/batik-gvt.jar file:/home/neogeo/lib/batik-svg-dom.jar file:/home/neogeo/lib/jxl-2.6.jar file:/home/neogeo/lib/groovy-all-1.5.5.jar file:/home/neogeo/lib/xercesImpl.jar file:/home/neogeo/lib/batik-awt-util.jar file:/home/neogeo/lib/bsh-2.0b4.jar file:/home/neogeo/lib/commons-digester-1.7.jar file:/home/neogeo/lib/batik-css.jar file:/home/neogeo/lib/commons-logging-api-1.0.2.jar file:/home/neogeo/lib/jfreechart-1.0.0.jar file:/home/neogeo/lib/itext-1.3.1.jar file:/home/neogeo/lib/poi-3.0.1-FINAL-20070705.jar file:/home/neogeo/lib/batik-util.jar file:/home/neogeo/lib/commons-beanutils-1.7.jar file:/home/neogeo/lib/jcommon-1.0.0.jar file:/home/neogeo/lib/saaj-api-1.3.jar file:/home/neogeo/lib/batik-script.jar file:/home/neogeo/lib/xalan.jar file:/home/neogeo/lib/batik-anim.jar file:/home/neogeo/lib/commons-collections-2.1.jar
<no principals>
java.security.Permissions@1aebb385 (
(java.io.FilePermission /home/neogeo/lib/jasperreports-3.0.0.jar read)
(java.util.PropertyPermission user.language write)
(java.util.PropertyPermission * read)
(java.lang.RuntimePermission modifyThreadGroup)
(java.lang.RuntimePermission createSecurityManager)
(java.lang.RuntimePermission modifyThread)
(java.lang.RuntimePermission preferences)
(java.lang.RuntimePermission exitVM)
(oracle.aurora.security.JServerPermission LoadClassInPackage.*)
{color}
{color:#ff0000}
at java.security.AccessControlContext.checkPermission(AccessControlContext.java)
at java.security.AccessController.checkPermission(AccessController.java)
at java.lang.SecurityManager.checkPermission(SecurityManager.java)
at oracle.aurora.rdbms.SecurityManagerImpl.checkPermission(SecurityManagerImpl.java)
at java.lang.SecurityManager.checkRead(SecurityManager.java)
at java.io.FileInputStream.<init>(FileInputStream.java)
at net.sf.jasperreports.engine.xml.JRXmlLoader.load(JRXmlLoader.java:167)
at net.sf.jasperreports.engine.xml.JRXmlLoader.load(JRXmlLoader.java:152)
at net.sf.jasperreports.engine.JasperCompileManager.compileReport(JasperCompileManager.java:150)
... 9 more{color}
I followed your help creating the file "ORACLE_HOME/javavm/lib/security / java.policy", but I still get the same exception.
Please, can you post the contents of your java.policy to understand how you set the permissions ?
Edited by: NeOGeO on 11-nov-2008 6.43

Java.util.PropertyPermission * read,write

on tryieng to call my function i am getting this error .
the Permission (java.util.PropertyPermission * read,write)
has not been granted by dbms_java.grant_permission to
SchemaProtectionDomain(JAVA|PolicyTableProxy(JAVA))
what should i do to remove this error.
null

i got it running by executing
DBMS_JAVA.GRANT_PERMISSION('JAVA','SYS:java.util.PropertyPermission', '*', 'read,write')
<BLOCKQUOTE>quote:<HR>Originally posted by Sherry:
on tryieng to call my function i am getting this error .
the Permission (java.util.PropertyPermission * read,write)
has not been granted by dbms_java.grant_permission to
SchemaProtectionDomain(JAVA|PolicyTableProxy(JAVA))
what should i do to remove this error.
<HR></BLOCKQUOTE>
null

(java.util.PropertyPermission * read,write) has not been granted

I've been getting the following error:
java.security.AccessControlException:
the Permission (java.util.PropertyPermission * read,write)
has not been granted by dbms_java.grant_permission to
SchemaProtectionDomain(ROVER|PolicyTableProxy(ROVER))
So to fix it I did the flowing as system:
SQL> EXEC DBMS_JAVA.GRANT_PERMISSION('ROVER','SYS:java.util.PropertyPermission', '*', 'read,write');
PL/SQL procedure successfully completed.
SQL> COMMIT;
Commit complete.
But their is no change.
What am I missing?
I'm using 8.1.6 on linux.

I'm also in this situation:
I got this error:
[1]: (Error): ORA-29532: Java call terminated by uncaught Java exception:
java.security.AccessControlException: the Permission
(java.net.SocketPermission mailhost resolve) has not been granted by
dbms_java.grant_permission to
SchemaProtectionDomain(TOLKIEN|PolicyTableProxy(TOLKIEN)) ORA-06512: at line
14
I believe I must use the dbms_java.grant_permission procedure to grant the
procedure to resolve hostname. But I don't know how to use this procedure.
I tried with
'dbms_java.grant_permission(SchemaOfMyJavaClass,'java.net.SocketPermission',
'mailhost','resolve',intRet);'
and a record is been appended to dba_java_policy, but Oracle complaines again.
Someone can help us?
<BLOCKQUOTE>quote:<HR>Originally posted by Oracle Support():
Can you see the permission in dba_java_policy table?
<HR></BLOCKQUOTE>
null

XSQL: Java 2 PropertyPermission Problem

Similar Messages

Maybe you are looking for